[openssl/openssl] 1579f5: sslapi: use correct fipsmodule.cnf
Pauli
noreply at github.com
Fri Apr 21 16:05:44 UTC 2023
Branch: refs/heads/openssl-3.1
Home: https://github.com/openssl/openssl
Commit: 1579f5ab5b2f98a9b00b3fb0d5ab2d68c81e719b
https://github.com/openssl/openssl/commit/1579f5ab5b2f98a9b00b3fb0d5ab2d68c81e719b
Author: Pauli <pauli at openssl.org>
Date: 2023-04-21 (Fri, 21 Apr 2023)
Changed paths:
M test/recipes/90-test_sslapi.t
Log Message:
-----------
sslapi: use correct fipsmodule.cnf
The SSL API tests copies fipsmodule.cnf and modifies it. Unfortunately, it
grabbed the wrong instance of this file.
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
(cherry picked from commit bc5d9502c5f3c726e42ef72263a4076fd48300d6)
Commit: 032afb4effec98f18c0712969b923ddb2bc59947
https://github.com/openssl/openssl/commit/032afb4effec98f18c0712969b923ddb2bc59947
Author: Pauli <pauli at openssl.org>
Date: 2023-04-21 (Fri, 21 Apr 2023)
Changed paths:
M test/recipes/30-test_evp_data/evprand.txt
Log Message:
-----------
test: update evprand tests in line with pedantic FIPS policy
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
(cherry picked from commit cf3d5c2fbaf734731b1ccbd3a84e21eeb6d0f30d)
Commit: 313849eeb71e49a80b912cc79ae0a78f83d6fefb
https://github.com/openssl/openssl/commit/313849eeb71e49a80b912cc79ae0a78f83d6fefb
Author: Pauli <pauli at openssl.org>
Date: 2023-04-21 (Fri, 21 Apr 2023)
Changed paths:
M test/recipes/30-test_evp_data/evpkdf_tls12_prf.txt
Log Message:
-----------
test: update TLS PDF tests in line with pedantic FIPS policy
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
(cherry picked from commit e07999369a13a29243f34cbd5d24281783984299)
Commit: 3375ae41847c133d1ce731bc8fd367d12b0049fd
https://github.com/openssl/openssl/commit/3375ae41847c133d1ce731bc8fd367d12b0049fd
Author: Pauli <pauli at openssl.org>
Date: 2023-04-21 (Fri, 21 Apr 2023)
Changed paths:
M test/helpers/ssl_test_ctx.c
M test/helpers/ssl_test_ctx.h
M test/ssl-tests/30-extended-master-secret.cnf
M test/ssl-tests/30-extended-master-secret.cnf.in
M test/ssl_test.c
Log Message:
-----------
test: update ssl_new tests in line with pedantic FIPS policy
Add a new option to the `test' section of SSL test data structure.
This contains a space separated list of version checks, all of which must
pass.
Note that the version checks are as they as because:
- 3.1.0 doesn't have mandatory EMS support, so it can run the old tests.
- 3.1.1 (& later) will have mandatory EMS support, so they can't run them.
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
(cherry picked from commit 4454c20f026bb47f158ea05c207f143c81d674d8)
Commit: b236fd27caa54cbd1d04204a1fbdb6689c51dbc0
https://github.com/openssl/openssl/commit/b236fd27caa54cbd1d04204a1fbdb6689c51dbc0
Author: Pauli <pauli at openssl.org>
Date: 2023-04-21 (Fri, 21 Apr 2023)
Changed paths:
M test/recipes/00-prep_fipsmodule_cnf.t
M util/mk-fipsmodule-cnf.pl
Log Message:
-----------
fips: setup the FIPS provider in pendantic mode for testing
Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
(cherry picked from commit c04e78f0c69201226430fed14c291c281da47f2d)
Compare: https://github.com/openssl/openssl/compare/d9e22a585d09...b236fd27caa5
More information about the openssl-commits
mailing list